• Please let us know about how you use email security solutions in your workplace

    Hello everyone,

    The Microsoft Forefront team is currently conducting a survey and would like to hear your opinions about email security, especially how you use email security solutions in your organization. We would appreciate it if you would take the time to respond to this survey.  This information will help us improve Forefront Protection for Exchange.

    Please consider taking a few minutes at this time to complete the survey. This survey should take about 10 -15 minutes to complete.

     

    To participate, please click here.

     

    Carolyn Liu
    Senior Program Manager, Forefront Server Protection

  • RELEASE ANNOUNCEMENT FOR HOTFIX ROLLUP 2 for FOREFRONT PROTECTION FOR EXCHANGE

    On behalf of the Security team at Microsoft, I am pleased to announce the release of Hotfix Rollup 2 for Microsoft’s Forefront Protection 2010 for Exchange.

     

    On November 30th Microsoft shipped Hotfix Rollup 2 for Forefront Protection 2010 for Exchange to provide a series of product enhancements and new features.

     

    For a complete list of the new features and enhancements included in this rollup, along with directions for download, please see the following Knowledge Base article: .http://support.microsoft.com/kb/2420647.

     

    As the installer runs, server service restarts may be necessary so please plan accordingly when applying this Hotfix Rollup. 

     

    Regards,

    Robert McCarthy
    CSS Microsoft Security

  • Forefront Protection Server Management Console 2010 Update

    My name is Andrew Schiano, and I work in Test for the Forefront Protection team. I would like to tell you a little bit about the soon-to-be released Forefront Protection Server Management Console 2010 (FPSMC). FPSMC provides centralized management for the Forefront Protection 2010 for Exchange (FPE) and Forefront Protection 2010 for SharePoint (FPSP) servers in your environment. FPSMC is expected to be available as a free download in Q4 2010.

     

    FPSMC provides multi-server management through a browser-based interface, and supports the following features:

    Signature redistribution

    The signature redistribution job is used to deploy antivirus signature updates to the FPE/FPSP servers in an environment. The most efficient way to update engine signatures on all your servers is to create a redistribution job to download them to the FPSMC server. The FPSMC server is then used as the retrieval point for all the other servers in the environment.

     

    Policy (configuration) deployment

    FPSMC supports deploying a centralized set of configuration settings to one or more FPE or FPSP servers in your environment. This is accomplished by configuring one of your FPE/FPSP servers to the desired configuration and then exporting these settings in xml format.  The xml file is then imported into FPSMC, which can deploy these same settings to your other FPE/FPSP servers.

     

    Patch deployment

    FPSMC supports deploying FPE and FPSP roll ups and service packs. Patch packages can either be .MSP or .EXE file types.

     

    Centralized incident reporting

    The Incident Detection report presents data about the number of malware incidents and filter matches over a period of time on one or more managed servers. This includes the five most common malware types detected in your organization and the most recent detection date and time.

     

    Centralized spam reporting

    The Spam Detection report presents data about the number of spam messages blocked by FPE. This includes a pie-chart breakdown by filter type and a line graph showing the number of spam messages detected over time.

     

    Centralized engine versions reporting

    The Engine and Definition Versions report presents data about the antivirus engine versions and definitions on selected servers running FPE and FPSP. This report compares the current engine versions of the managed servers to determine which, if any, of your signatures are out of date.

     

    Quarantine management

    FPSMC supports retrieving quarantine data from managed Forefront Protection servers for local analysis and management, including delivering Exchange quarantine and restoring SharePoint quarantine.

     

    Integration with Forefront Online Protection for Exchange (FOPE).

    If you are using FOPE in your organization, you can use FPSMC to access the FOPE Administration Center to monitor your email flow. FPSMC provides access to the FOPE home page, quarantine, reports, and mail tracing facilities.

     

    Auto discovery of servers

    On a nightly basis, FPSMC will automatically detect new FPE and FPSP servers that have been added to your network.

     

    Exchange Clusters -- CCR, SCC, and DAG 
    FPSMC supports clustered Exchange servers, including E14 Database Availability Groups.

     

    FPSMC will initially be available in English.  Localized versions in all 11 languages (Chinese-Simplified, Chinese-Traditional, English, French, German, Italian, Japanese, Korean, Portuguese-Brazil, Russian, and Spanish) will be released at a later date (to be announced).  

     

    Thank you for your time, and I hope you found this article helpful.

     

    Andrew Schiano

    Software Development Engineer in Test

  • Hotfix rollup 3 for Forefront Security for Exchange Server SP2 and hotfix rollup 3 for Forefront Security for SharePoint SP3 are now available

    On behalf of the Forefront Server Protection team at Microsoft, I am pleased to announce the release of Forefront Security for Exchange Server (FSE) SP2 Rollup 3 and Forefront Security for SharePoint (FSSP) SP3 Rollup 3.

     

    On October 8th, 2010 Microsoft shipped both builds to address a performance issue with version 8 of the Kaspersky antivirus engine.

     

    For a detailed description of the updates please see the following Knowledge Base articles:

    As the installer runs, server service restarts may be necessary, so please plan accordingly when applying this hotfix rollup. 

     

    Regards,

    Robert McCarthy
    Sr. Support Engineer
    Microsoft Security

  • Information about the new antivirus engine for Forefront and Antigen products

    Microsoft is upgrading the multi-engine protection in all Forefront server security products to support a newer version of the antivirus engine.  The newer version will provide customers with improved scanning times and reduced signature file size. The new engine replaces the older engine. 

    This new engine publishes update files in a subdirectory – the first engine in the Forefront engine mix to do so.  In order to accommodate this new publishing model, Microsoft is releasing a series of roll-ups that will:

            Include the new antivirus engine

            Ensure that any engine that publishes update files in a subdirectory will update correctly

    Customers must install the rollups by Jan. 31, 2011.

     

    Krishnan Venkatasubramanian

    Senior Program Manager, Forefront Server Protection